Opt-in
Opt-in explained
Before the decision, explain who wants to use which data and for what purpose. The action must clearly match that choice. It may be an intentionally selected option or a clearly labelled signup; not every valid form needs the same checkbox design. Preselected consent, silence or simply continuing to browse is not active agreement. Different purposes must be appropriately separable.
Consent is one of several possible legal bases for personal data under the GDPR. It is not required for every processing activity: necessary contract fulfilment differs from additional advertising. Other rules may also apply by channel. Advertising emails in Germany require particular attention to section 7 UWG. Cookie choices, newsletter subscriptions and permissions for other data uses are therefore not interchangeable.
An opt-in must remain demonstrable. Document the statement, its scope at the time, timing and association in a way appropriate to the task. Do not collect unnecessary extra data merely to do so. The person must also be able to withdraw consent easily. Withdrawal ends further use based on that consent; it does not retrospectively invalidate previously lawful processing. Other necessary activities need their own basis.
Check implementation beyond the form. Does the correct status reach the sending system? Are unsubscribes respected in copies and connected workflows? What happens on a new signup? A consent dialogue or platform is only a tool. Good design makes choices and consequences clear and avoids forcing agreement through confusing language or unnecessary obstacles.
Examples
Hypothetical application
When registering for a professional event, someone can voluntarily choose an additional monthly topic newsletter. Event administration works without that choice. If the newsletter is later cancelled, its delivery stops; necessary information about the already-booked event is handled separately.
Key Points
- Make the specific use and active decision clear.
- Distinguish consent, other legal bases and channel-specific rules.
- Account for evidence and withdrawal in the real process.
Practical application
Explain purpose, sender and scope in understandable language. Check the choice without preselection, evidence and withdrawal. Then follow the route through every system intended to act on that agreement.
Useful measures
Understandable choice
Check whether people understand what they are agreeing to and how to decline.
Demonstrable basis
Review association, stated scope and appropriate documentation.
Effective withdrawal
Check that the affected further use stops across connected workflows.
Common mistakes
- Presenting consent as the GDPR’s only legal basis.
- Extending agreement to unexplained purposes or channels.
- Combining easy signup with unnecessarily difficult withdrawal.
Sources and context
- EDPB: Guidelines 05/2020 on consent
GDPR consent: specific purposes, free choice, evidence and withdrawal.
- § 7 UWG: Unzumutbare Belästigungen
German rules for electronic advertising, including the limited existing-customer exception (section 7).
- Mailchimp: Double Opt-in
Two-step signup process; custom forms and integrations require separate checking.
Frequently Asked Questions about Opt-in
No. The GDPR provides several legal bases. The appropriate one depends on purpose and context. Additional rules for the communication channel still apply.
No. Opt-in requires an active, unambiguous choice. Preselected fields or silence cannot replace it.
Opt-in describes agreement. Double opt-in adds a second confirmation step to signup, often through email. That step cannot repair unclear or invalid consent wording.
Loading related terms…
All TermsArticles about Opt-in
Agentic Marketing: How Autonomous AI Agents Are Transforming Marketing in 2026
Autonomous agents take over research, campaign ops and real-time budget allocation. What agentic marketing means for CMOs, which use cases work today, and how to set up governance and ROI.
Prompt Ops: The Operating System for AI in Marketing
The uncontrolled use of AI prompts leads to chaos. Prompt Ops provides a structured approach to manage prompts like software, ensuring efficiency, quality, and scalability in marketing.
The EU AI Act is Coming: Your 2026 Marketing Playbook
The EU AI Act arrives in 2026, mandating new transparency rules for AI in marketing. This guide shows what CMOs must do for AI assets, chatbots, and workflows to ensure compliance.